• 0
Sign in to follow this  
bcallan@hyetechnetworks.com

"Value" field breaks CSV Alert Report in some cases

Question

The Value field for some alerts, most notably Windows Event Logs, is not handled correctly when exporting alert history to CSV using the Reports function. 

For example, the following excerpt of what should be 4 rows from a CSV Alert Report that contains both valid and invalid row data in the Value field:

Severity,Group,Device,Datasource,Instance,Datapoint,Thresholds,Value,Began,End,Rule,Chain,Acked,Acked By,Acked On,Notes,In SDT
warn,GroupName,DeviceName,Organizational Units,ActiveDirectory_OrganizationalUnits,AnyChange,,A change was made to the configuration file,2019-09-10 20:17:39 MST,2019-09-10 20:20:49 MST,N/A,N/A,yes,AckuserName,2019-09-10 20:20:49 MST,ACK,no
warn,GroupName,DeviceName,Windows Domain Services Event Log,Windows Domain Services Event Log,4725,,"A user account was disabled.

Subject:
    Security ID:        Masked_SID
    Account Name:        Masked_Account
    Account Domain:        Masked_Domain
    Logon ID:        Masked_ID

Target Account:
    Security ID:        Masked_SID
    Account Name:        Masked_Account
    Account Domain:        Masked_Domain",2019-09-12 14:42:12 MST,2019-09-12 14:53:42 MST,N/A,N/A,yes,AckUserName,2019-09-12 14:53:42 MST,ACK,no
warn,GroupName,DeviceName,Windows System Event Log,Windows System Event Log,7023,,"The Interactive Services Detection service terminated with the following error: 
Incorrect function.",2019-09-27 02:04:48 MST,2019-09-27 03:05:09 MST,AlertRule,EscalationChain,no,,,,no

 

HTML and PDF reports don't appear to have this issue.

Share this post


Link to post
Share on other sites

0 answers to this question

Recommended Posts

There have been no answers to this question yet

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this